Unistore.dll

  • File Path: C:\Windows\SysWOW64\Unistore.dll
  • Description: Unified Store

Hashes

Type Hash
MD5 E2E3C8B64771E567A24123FB5538D48F
SHA1 2BF439485A7C528BF06FB581DEE54F06E6A7F8B6
SHA256 0DCC53F38B24E434EF4E117D92A1C39FB623BB358C17FB3716B1CB25473AF7C3
SHA384 7B1C29EB8568A946773C1BC8F29EC88E358624F2081DDF5908DD723CCC0FF01A28A0A6A0177D563E64ECDCC5F78236A5
SHA512 1F875C2EB7A5A5D62A0CE81A98C4CC17488DF60A992FE6FE2CF26A3F86DD2E2AA792692BEC6F8F5DEB97465EC6910D84088DBE2DB837BA6EDF421C255A52E5EC
SSDEEP 24576:iBMZXrWBQYy106F4Qr8nKCGy3Qr0gtmlvWsicVLt2LshvY:iiUQYy10w4SyKCGylUg1hvY
IMP ADB3A0B9904583AC3356650DD087024C
PESHA1 15379E6A4E4D5B94FF138DA08B16E71B2E2B832A
PE256 8DD0CB3939E0A2BC9D46EF0A4022A0AE9C9FF3B5BD7DBD34D154FF78345F01BB

DLL Exports:

Function Name Ordinal Type
ServiceMain 31 Exported Function
RemoveStaleChangeTrackingDataOnStore 30 Exported Function
SetMaxRevisionBlobSize 32 Exported Function
SetUnistoreVersion 34 Exported Function
SetUnistoreProcessEventFilter 33 Exported Function
IsUSPropValPresent 24 Exported Function
IsUnistoreLocal 26 Exported Function
LowerRPCPriority 27 Exported Function
ReleaseUnistoreJetInstance 29 Exported Function
RegisterRundownProtectionForProcess 28 Exported Function
StartUnifiedStoreWorkForClient 35 Exported Function
USGetPropValsAncillaryBufferSize 41 Exported Function
USEventMaskToObjectType 40 Exported Function
USIsObjectHidden 6 Exported Function
USObjectTypeToEventMask 42 Exported Function
USIsSameObject 7 Exported Function
USBlobToAppRevisionBlob 5 Exported Function
SvchostPushServiceGlobals 36 Exported Function
USComparePropVals 37 Exported Function
USDeleteFileEx 39 Exported Function
USCopyPropVals 38 Exported Function
DisableLocalUnistore 13 Exported Function
DetectExistingCorruption 12 Exported Function
EnableLocalUnistore 14 Exported Function
FindMaxSeenRevisionForAppInBlob 16 Exported Function
EndUnifiedStoreWorkForClient 15 Exported Function
AppRevisionBlobToUSBlob 1 Exported Function
AddDWORDPropertyRestrictions 8 Exported Function
ClearUSCache 9 Exported Function
CreateStoreManagerWithToken 11 Exported Function
CreateStoreManager 10 Exported Function
GetCurrentProcessRundownProtectionIdentifier 17 Exported Function
GetUSDeviceStoreVolumePath 20 Exported Function
GetUSDeviceStoreFolderPath 4 Exported Function
GetUSFileStreamPath 21 Exported Function
IsUnistoreInProc 25 Exported Function
IsCEPropValPresent 23 Exported Function
GetRealStoreManager 18 Exported Function
GetDeviceStoreDefaultName 2 Exported Function
GetUnistoreJetInstance 22 Exported Function
GetUSDeviceStoreCorruptedVolumeFolderPath 19 Exported Function
GetUSDataFolderPath 3 Exported Function

Signature

  • Status: Signature verified.
  • Serial: 330000026551AE1BBD005CBFBD000000000265
  • Thumbprint: E168609353F30FF2373157B4EB8CD519D07A2BFF
  • Issuer: CN=Microsoft Windows Production PCA 2011, O=Microsoft Corporation, L=Redmond, S=Washington, C=US
  • Subject: CN=Microsoft Windows, O=Microsoft Corporation, L=Redmond, S=Washington, C=US

File Metadata

  • Original Filename: Unistore.dll
  • Product Name: Microsoft Windows Operating System
  • Company Name: Microsoft Corporation
  • File Version: 10.0.19041.1 (WinBuild.160101.0800)
  • Product Version: 10.0.19041.1
  • Language: English (United States)
  • Legal Copyright: Microsoft Corporation. All rights reserved.
  • Machine Type: 32-bit

File Scan

  • VirusTotal Detections: 0/72
  • VirusTotal Link: https://www.virustotal.com/gui/file/0dcc53f38b24e434ef4e117d92a1c39fb623bb358c17fb3716b1cb25473af7c3/detection/

MIT License. Copyright (c) 2020 Strontic.